# Sitoo

Sitoo (sitoo.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/sitoo
- Documents last verified: 2026-10-01
- Transparency rating: 72/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 4 tracked vendors directly, 60 within two hops, 217 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Sitoo, Third Party Index, https://thirdpartyindex.com/vendors/sitoo (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.sitoo.com/ | 2026-10-01 | 2026-10-01 |
| Subprocessor list | https://trust.sitoo.com/subprocessors | 2026-10-01 | 2026-10-01 |
| Privacy policy | https://sitoo.com/about/privacy-notice-general | 2026-10-01 | 2026-10-01 |
| Status page | https://status.sitoo.com/ | 2026-10-01 | 2026-10-01 |

## Subprocessors (5)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Amazon Web Services (AWS) provides the cloud service which hosts the Sitoo POS and Unified Commerce Platform. The Controller's data will be recorded and stored within the cloud service.; Cloud Service Provider | EU | 2026-10-01 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Productivity Service for file storage, spreadsheets, documents, etc. Support Ticket Email Processing. The Controller's data will be recorded and stored within the cloud service.; Productivity platform | EU | 2026-10-01 |
| Onitio | Customer Support; Provides first line customer support. Visma provides on-call First-Line Support after business hours on behalf of Sitoo. The Controller’s data in respect of staff calling the support will be recorded and stored by Visma. | EU | 2026-10-01 |
| [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Customer Support; Sitoo is using Salesforce as a support matter management software. The Controller's data in respect of support matters will be recorded and stored by the Salesforce Service Cloud software. | EU | 2026-10-01 |
| [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md) | Customer Support; Zendesk provided a SaaS support matter management software used by Sitoo replaced by Salesforce. Zendesk contains historical data customer support related data until the migration to Salesforce has been completed and verified. The Controller's data in respect of support matters will be recorded and stored by the Zendesk software. | EU | 2026-10-01 |

Read from ([evidence](https://thirdpartyindex.com/evidence/29738)). CSV: https://thirdpartyindex.com/vendors/sitoo/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/29739))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/29739))

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-10-01
- No incidents reported in the last 12 months
- 2025-11-10: Infrasec Service Disruption (Sitoo POS users in Sweden using a control unit from Infrasec are affected) (critical)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api